On Sun, Apr 29, 2007, Metalpalo wrote:

> 
> Hello everybody
> 
> I have got problem.
> 
> I created certificate via openssl utility follows by command:openssl.exe ca
> -extensions v3_ROOT_CA  -enddate 491231235959 -out %CA_Certificate% -in
> %CA_Request% -keyfile %CA_Private_Key% -selfsign -config %CA_OPENSSL_CONF%
> -passin pass:%CA_PASSWORD% -batch -md ripemd160 
> 
> In this command I entered the expired date without zone for certificate
> through parameter -enddate 491231235959.
> But when I'm looking at certificate in the text format I see followed
> result:Not Before: Apr 30 06:50:25 2007 GMT
>                                                                               
>                                 
> Not After : Dec 31 23:59:59 2049
> 
> When I tried to add the other time zone e.g. 491231235959+0100 the result
> was just the same. I need to add same time zone as in startdate which is
> default  e.g.  "Not After : Dec 31 23:59:59 2049 GMT"
> 
> Can somebody help me to resovle this problem?
> 

Including a timezone in a certificate is a violation of the standards. The
time must always be represented as GMT.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to